PHP mysql_excape but need to search for those items [message #178358] |
Mon, 11 June 2012 15:34 |
mrgushi
Messages: 3 Registered: June 2012
Karma:
|
Junior Member |
|
|
Hey Guys,
First time poster here. I'm working on an App that needs to be able to
querry my DB via PHP in particular those items such as periods commas
slashes and things that mysql_real_escape_string cleans out to prevent
SQL injection attacks. How would you recommend doing that securely? My
SQL login rights in the script are read only is that enough?
I was thinking of using JS to modify the querry before they hit the
mysql_real_escape_string such that I have a custom DB lookup for each
major punctuation... A period = punc1 A comma = punc2 etc.... Any
Alternate thoughts would be appreciated.
THX
PS- My app is a English Translation guide to Braille so I need to be
able to lookup punctuation in the DB somehow.
|
|
|